Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/152ef7aa-feb2-3b77-863b-0c0926ced814.roa
File:                     152ef7aa-feb2-3b77-863b-0c0926ced814.roa (raw, json)
Hash identifier:          laTkj2lw18PmOo/5CGYEe3XT1s7La1aZrst5B4e/98s=
Subject key identifier:   96:09:F0:89:61:BA:F5:06:9B:0A:B6:46:ED:48:7F:91:71:95:A6:9C
Certificate issuer:       /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial:       010D0C9F4328584B540C9B67364E832A25093500
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/152ef7aa-feb2-3b77-863b-0c0926ced814.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     11659
IP address blocks:        169.147.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:9b:67:36:4e:83:2a:25:09:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=33693c62-cfa4-4769-a77e-e3feb1ba6634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:9b:9c:2f:11:ab:da:4b:13:1b:1f:5d:8c:
                    57:11:93:77:f5:36:2a:79:c3:61:e7:c4:6f:32:14:
                    06:e9:91:75:a9:2d:28:49:e1:90:1f:95:4b:16:67:
                    48:8f:06:0d:41:9a:5c:1a:43:5c:e0:95:4e:78:43:
                    ae:f1:ce:ff:cc:77:77:c3:a4:c7:3e:48:57:1a:58:
                    41:46:e4:78:3b:72:e9:48:4a:65:d6:bd:8b:e8:24:
                    87:03:36:8d:f3:20:98:02:e3:65:67:9d:c9:b4:df:
                    56:4a:2c:b1:ee:2e:5c:31:e5:bd:e5:13:ff:ad:db:
                    9b:ff:a8:72:01:f3:58:2d:64:8b:d9:c4:8a:b2:8d:
                    fd:a1:79:43:9f:40:20:76:e9:57:24:28:5a:d3:f6:
                    d9:c8:df:7f:45:83:f6:52:db:86:26:44:7f:9e:15:
                    2a:9d:54:f7:f0:be:39:9e:62:ab:14:75:95:7b:ee:
                    db:9a:96:7a:84:14:ef:c4:d8:32:08:79:2f:ae:79:
                    91:d0:db:8c:25:1f:12:c9:be:bb:d0:f1:3f:84:c8:
                    28:5d:4c:56:0b:98:54:98:f5:ee:a1:92:76:a4:90:
                    81:83:30:06:ad:bb:d1:59:8a:a8:dd:ad:66:20:66:
                    f4:cb:b3:ec:ea:ce:15:ab:25:58:4e:42:7d:e3:81:
                    f1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:09:F0:89:61:BA:F5:06:9B:0A:B6:46:ED:48:7F:91:71:95:A6:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/152ef7aa-feb2-3b77-863b-0c0926ced814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl

            X509v3 Authority Key Identifier:
                keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.147.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:bc:39:1f:d5:ff:16:18:16:e5:bc:33:5b:dd:c4:24:ca:ba:
         c1:19:e1:c2:b1:ed:26:20:d9:df:48:d9:f6:c5:3c:9e:ff:b8:
         7e:7b:4e:64:f8:6b:ec:5c:62:49:d3:1e:47:9f:a7:73:4f:82:
         8b:06:ed:6f:33:74:18:8e:4a:77:1a:3c:a3:7b:22:05:6e:77:
         7f:8c:c1:1a:77:f9:f6:d3:c3:91:93:75:f3:6c:f0:ad:b4:83:
         a8:5d:35:fa:d5:66:4d:ee:d1:25:7c:46:02:d2:3d:d7:9c:ff:
         25:9d:db:66:88:e8:81:81:34:bd:b6:92:50:3b:ec:34:df:a3:
         2f:c6:a2:43:a7:a0:6a:1f:bd:72:3d:29:37:9d:42:1d:05:9d:
         bb:49:c8:4c:4f:57:3c:28:d0:d1:ec:c6:83:68:e4:a6:ab:be:
         fe:cf:e4:dc:f5:3b:5b:29:fd:98:c4:05:63:af:75:b3:f4:31:
         85:89:f7:8f:5a:2b:5f:e6:22:c6:9a:dc:88:2b:f8:a4:a4:4c:
         7b:80:8d:98:44:5e:fe:51:6c:f1:fe:20:2a:5a:6a:b1:a4:5a:
         93:3a:5e:66:03:bd:dc:34:0b:f0:9d:3c:cc:c0:c3:74:68:67:
         be:d3:20:99:0d:b4:60:4b:da:d2:8a:a3:94:74:f0:c4:77:6f:
         c3:26:b5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 09:54:18 2025 by rpki-client